Valerie AuroraMy hot take: software companies should not only have bug bounties but also pay external orgs/consultants for other activities: dev tooling, maintenance, testing, standard compliance, accessibility, etc.
My current working theory is that there is a whole range of software-related work that cannot be done effectively by employees of a company because the internal incentives oppose it. Security is the obvious one but also the above-listed activities are this way too
All GNU social JP content and data are available under the